This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147118.roa
File:                     AS147118.roa (raw, json)
Hash identifier:          S0n3k+1tKNRG7vDis0v1+WWGbUq7GsQeJzM9LzM/u0w=
Subject key identifier:   68:02:45:8C:AC:C6:91:84:CE:E3:BF:95:EB:46:BB:E9:FB:94:AD:F0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1FD94A199D402F72C9533278AE6FB103A55F14C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147118.roa
Signing time:             Wed 31 Dec 2025 05:00:00 +0000
ROA not before:           Wed 31 Dec 2025 04:55:00 +0000
ROA not after:            Wed 30 Dec 2026 05:00:00 +0000
asID:                     147118
IP address blocks:        103.175.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d9:4a:19:9d:40:2f:72:c9:53:32:78:ae:6f:b1:03:a5:5f:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 31 04:55:00 2025 GMT
            Not After : Dec 30 05:00:00 2026 GMT
        Subject: CN=6802458CACC69184CEE3BF95EB46BBE9FB94ADF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:46:e7:38:ed:38:7e:67:95:87:46:d8:b2:
                    82:19:da:03:d9:dc:65:a9:0c:54:43:08:42:eb:59:
                    e8:41:f4:bb:02:e5:36:8a:bd:e2:df:b8:93:66:51:
                    c7:bb:5a:cc:c0:6d:bf:fc:f0:50:a7:da:65:b7:c7:
                    9f:51:87:aa:11:c3:d3:0c:99:f4:45:35:7a:48:8c:
                    34:be:94:63:de:73:db:00:f8:f6:8c:b7:2c:86:ea:
                    21:c3:8a:1b:20:85:eb:28:10:88:00:68:23:14:56:
                    05:8d:c6:5e:66:d6:04:d6:a8:2d:28:51:fc:f0:40:
                    52:2d:c6:e1:76:36:6f:ae:8f:d5:8f:01:4e:c4:9c:
                    ec:32:61:9a:c8:11:e1:f6:c4:16:a1:9a:5c:f5:e6:
                    93:27:d9:23:8c:90:b4:0e:69:19:e6:28:11:82:67:
                    14:53:af:2a:b4:28:ed:1b:c2:f1:3d:a7:9c:79:d9:
                    3e:42:6b:5b:bc:6d:94:ae:2c:67:cc:65:d0:fb:87:
                    d3:9f:5f:52:85:bc:6e:f1:e5:28:13:d3:4d:21:43:
                    75:0f:b2:2d:32:dc:22:27:d0:7c:97:b9:a8:3e:45:
                    e2:8c:f5:30:6e:e6:71:7e:73:d9:c0:d7:a5:c6:8f:
                    de:d6:ce:5e:c1:67:c2:58:ce:6b:9f:a9:22:bb:9c:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:45:8C:AC:C6:91:84:CE:E3:BF:95:EB:46:BB:E9:FB:94:AD:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147118.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:29:a8:ba:8c:8d:aa:e4:80:53:a4:8e:59:c6:af:81:36:
         4c:78:11:55:54:6d:fd:b4:f3:4e:3d:58:9e:b8:a2:c4:18:6b:
         75:92:81:8b:d8:3f:b9:2d:a9:fb:ac:06:d0:25:11:e9:18:da:
         dc:a3:9f:20:d1:2b:d3:7c:c7:fd:c6:f5:10:d3:9b:75:6a:59:
         f6:b2:54:3e:6c:17:d8:45:a7:e9:ef:67:02:37:a3:50:14:af:
         e8:a1:8e:b4:4d:2f:9e:62:b2:8a:27:f6:3c:6a:0d:87:c8:82:
         28:7d:59:ca:f2:35:e7:72:19:00:a6:e6:1b:c7:e7:dc:cd:47:
         21:61:21:ac:92:28:1a:f7:81:84:83:f9:17:df:e5:61:78:c9:
         40:df:6a:6c:16:8c:69:8e:64:72:8a:c1:39:0e:7e:0d:ef:ea:
         85:de:bc:99:59:53:26:6e:14:ee:75:2e:fa:86:c2:8d:a8:f1:
         6c:01:e6:75:a6:42:e8:68:7a:ab:41:39:54:5a:df:90:6a:ea:
         fd:e1:40:08:7f:19:b1:d2:76:7e:c2:c3:65:53:62:7c:01:81:
         3f:4f:aa:24:35:99:7a:d2:d8:96:23:81:91:60:00:72:fc:85:
         b2:93:6d:ef:44:09:c3:8b:f5:4d:29:df:65:18:ec:a1:67:da:
         c4:f5:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:24:20 2026 by rpki-client